Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa
File: ef3bb060-55cf-3033-a86b-5a573f947a0d.roa (raw, json)
Hash identifier: VVpl02QnNoeAMo6ztY5Al3rDO+BJa2NsBzDd4rWuN58=
Subject key identifier: 9B:DA:99:9B:96:DB:26:4F:0C:78:FB:FA:C2:5A:A9:80:27:1C:7E:95
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819E29AE3520BBC166A700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:9e:29:ae:35:20:bb:c1:66:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f35bd050-9b57-42e4-9f1e-519dde8ec5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:e6:03:7e:7e:cb:07:61:6c:50:95:a6:85:
a9:c6:fb:f9:48:f7:40:71:4f:75:36:95:45:7a:19:
c0:f5:86:7a:22:e0:db:01:28:cf:ee:ef:a6:ae:4c:
4c:26:a5:72:c2:a9:fb:ce:e1:21:ee:65:ab:9e:45:
10:60:83:d2:e1:b8:1c:7e:0e:f2:1e:15:33:0d:75:
c9:1e:1d:22:55:db:00:80:fb:06:35:96:b4:b1:7a:
3c:94:9e:92:bd:81:43:d4:12:94:a6:dc:9f:ee:4f:
c3:7f:42:db:3b:7a:92:cd:83:b9:1d:96:cf:d8:fa:
f6:db:4e:74:b4:ab:1e:64:48:79:7f:cd:a3:88:50:
b3:84:7b:89:50:4d:6e:b9:dc:4f:f6:ee:09:13:06:
44:7b:56:1e:88:a4:4e:e1:ca:1b:dd:c0:bb:33:11:
05:58:d8:cc:b7:b2:01:8d:a9:cf:7a:41:31:d7:a9:
f5:7b:da:7a:50:f2:65:11:d4:9f:9e:f8:db:b6:94:
eb:72:be:94:86:3f:ed:a5:e0:a5:ca:64:63:9f:e1:
71:8a:ea:95:72:0b:a7:1c:71:d4:b8:36:08:a4:7b:
8f:3e:fc:f9:43:39:04:c7:34:27:d7:38:da:52:61:
07:49:ce:3e:06:16:d5:c0:74:ec:16:d9:17:f4:2d:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DA:99:9B:96:DB:26:4F:0C:78:FB:FA:C2:5A:A9:80:27:1C:7E:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:2b:42:90:f3:82:02:23:c4:4c:76:82:87:b4:0c:40:69:f3:
45:a0:72:a5:59:db:f2:a4:be:d7:c3:2e:a6:40:a8:7e:4e:46:
30:d7:b4:e1:c2:5c:1e:ae:32:45:43:d4:e0:19:2e:21:f5:82:
97:64:40:1a:17:37:ad:ab:2b:16:27:47:0e:e3:c8:ec:ad:21:
d6:5f:fe:a4:99:0e:86:69:7a:a0:8c:13:13:54:88:d4:51:ae:
fa:9c:d2:91:49:83:e1:e1:e6:ef:04:62:cb:62:57:80:b8:25:
f7:f8:c2:1a:8b:0e:de:b9:6c:ff:12:61:c3:70:45:60:59:ce:
2f:f4:cf:b5:df:e5:18:93:cd:24:a2:c5:5c:e9:bd:93:4e:42:
74:19:70:69:f2:4f:7a:53:c0:d1:d6:e0:5f:d4:b4:da:45:48:
fa:d1:86:4b:a4:5b:99:72:e3:f5:31:af:e1:92:ba:d3:91:67:
32:f9:c7:e2:b0:81:55:9b:d7:f8:33:5d:58:a7:7c:6a:02:1d:
9b:40:d1:09:f7:9e:8f:c7:00:07:7a:a5:b7:0a:d7:42:01:bb:
1a:f5:36:52:9f:ad:3e:f8:7c:f5:81:ff:e2:d0:be:3d:34:c1:
42:b1:06:f9:40:25:47:54:54:9d:8e:7c:1f:fc:11:64:cf:0f:
8b:6e:59:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:57 2025 by rpki-client